由于LDAP错误、无法将SVM加入域:用户的访问权限不足
适用场景
- ONTAP 9
- CIFS/SMB
问题描述
- 执行
vserver cifs create
或时、无法将SVM加入域vserver active-directory create
- LDAP错误:
(sample ERROR 7)
Error: Machine account creation procedure failed
[ 33] Loaded the preliminary configuration.
[ 36] Successfully connected to ip 10.216.29.40, port 88 using TCP
[ 43] Requested service not found in Active Directory (KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN)
[ 43] Failed to initiate Kerberos authentication. Trying NTLM.
[ 45] Successfully connected to ip 10.216.29.40, port 389 using TCP
**[ 89] FAILURE: Could not create account
** 'cn=DOCTORDOOM,CN=Computers,dc=INTERNALDOMAINA,dc=LOCAL':
** an LDAP constraint violation occurred, which may indicate
** the supplied user has insufficient privilege to add an
** account in the specified organizational unit
Error: command failed: Failed to create the Active Directory machine account "DOCTORDOOM". Reason: LDAP Error: The user has insufficient access rights.